Apache+modssl options

Charles Sprickman spork at inch.com
Thu Oct 21 17:27:51 PDT 2004


Hi,

Just curious if anyone has any information on getting the most out of
apache+modssl (1.3 branch of apache).  I've been digging around the config
and looking at some of the SSL-specific options.  Also had a look at the
mod_ssl website docs.

There seem to be a number of OS-specific settings that leave me with more
questions than answers.  Does anyone know what is optimal with FreeBSD for
the following:

SSLMutex - port builds with type "file", but "sem" is also an option that
seems better, if supported...

SSLRandomSeed - port builds it with "builtin", but again wondering if
/dev/random or /dev/urandom (and tweaks with rndcontrol) would be better.

SSLSessionCache - port builds with "dbm" method, but "shm" looks like it
might be faster.

Also if anyone has other hints on speeding things up, they are much
appreciated.  Not quite ready for the hardware accel card yet though. :)

Thanks,

Charles

--
Charles Sprickman
spork at inch.com



More information about the freebsd-isp mailing list